Try our new research platform with insights from 80,000+ expert users

AWS WAF vs StackPath WAF comparison

Sponsored
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Cloudflare
Sponsored
Average Rating
8.6
Reviews Sentiment
7.1
Number of Reviews
76
Ranking in other categories
CDN (1st), Distributed Denial-of-Service (DDoS) Protection (1st), Managed DNS (1st), Cloud Security Posture Management (CSPM) (13th)
AWS WAF
Average Rating
8.0
Reviews Sentiment
7.6
Number of Reviews
59
Ranking in other categories
Web Application Firewall (WAF) (2nd)
StackPath WAF
Average Rating
9.0
Reviews Sentiment
8.5
Number of Reviews
1
Ranking in other categories
Web Application Firewall (WAF) (33rd)
 

Featured Reviews

Carlos Alam Hernandez Baruch - PeerSpot reviewer
Fast and secure deployments simplify operations for government and fintech clients
It is a fast and secure DNS. It is very easy to deploy, and my customers are happy with this tool. Additionally, the CDN performance in Mexico is excellent, providing fast service and tools. It offers reliability during high-traffic periods, ensuring no impact on the environment. It helps my clients avoid using on-premise boxes, simplifying operations as they only use the prices on Cloudflare.
Kavin Kalaiarasu - PeerSpot reviewer
AWS's cloud-native security simplifies rule enforcement but needs better DDoS integration
The dashboarding could be improved, and the default metrics provided by AWS WAF could be upgraded. The rate at which AWS updates their managed rule sets could be better. Features like bot protection or DDoS mitigation, available with other WAF vendors, do not come natively with AWS WAF. Instead, they are part of AWS Shield. Providing DDoS protection as part of their WAF solution would be beneficial.
FC
Stable product with an easy setup process
We use StackPath WAF to protect small websites for our customers The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites. The product’s performance for caching feature needs improvement. It could provide high security to handle large traffic volumes for…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"What I like best about Cloudflare is that my company can use it to trace and manage applications and monitor traffic. The solution tells you if there's a spike in traffic. Cloudflare also sends you a link to check your equipment and deployment and track it through peering, so it's a valuable tool."
"I like Cloudflare's application gateway and DDoS protection."
"Easier http to https redirect using page rules"
"Cloudflare consolidates various capabilities into one product, streamlining processes."
"The UI is good."
"The most valuable features of the solution are performance and security."
"The most valuable feature is its usability."
"There are key things that are used for our enterprise customers, such as Lambda and DNS."
"We do not have to maintain the solution."
"AWS WAF helps mitigate different kinds of bot attacks and SQL injection that happen within the retail industry."
"AWS has flexibility in terms of WAF rules."
"I believe the most impressive features are integration and ease of use. The best part of AWS WAF is the cloud-native WAF integration. There aren't any hidden deployments or hidden infrastructure which we have to maintain to have AWS WAF. AWS maintains everything; all we have to do is click the button, and WAF will be activated. Any packet coming through the internet will be filtered through."
"The solution's initial setup process is easy."
"The most valuable feature is that it is very easy to configure. It just takes a couple of minutes."
"The most valuable features are the geo-restriction denials and the web ACL."
"As a basic WAF, it's better than nothing. So if you need something simple out of the box with default features, AWS WAF is good."
"The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites."
 

Cons

"There might be helpful if there was some web application firewall feature."
"The solution could work at being less expensive. It costs a lot to use it."
"The tool needs to improve caching of servers. The product needs to include PFX certificate as well."
"The solution could be more user-friendly."
"I would like Cloudflare to offer a dedicated account manager for large enterprise clients like us."
"Cloudflare doesn't have a reverse lookup. We can only do a DNS lookup to get the IP address from the hostname. It doesn't work if you want to look up the hostname from an IPA address."
"If they improve on the placement of their data centers, it would be better. I'm living in a remote area. I would like to connect to them without any kind of lag."
"We have noticed multiple instances where Cloudflare falsely indicates that our servers are down, even when there is no actual load on them. This makes it challenging for us to identify the exact issue."
"The solution's pricing could be improved."
"The pricing model is complicated."
"The setup is complicated."
"The cost must be reduced."
"It will be helpful if the product recommends rules that we can implement."
"They have to do more to improve, to innovate more features. They need to increase the security. It has to be more active in detecting threats."
"The solution can improve its price."
"AWS WAF's signature sets have room for improvement due to false positives."
"The product’s performance for caching feature needs improvement."
 

Pricing and Cost Advice

"The tool is a premium product, so it is very expensive."
"A free version of the solution is available."
"The cost primarily depends on the size of the organization."
"In terms of licensing costs, we don't pay for licensing for Cloudflare. We only establish communication, then for peering, Cloudflare takes care of the cross-connection in different data centers."
"The pricing depends on the usage, but the cheapest would be around 5,000 USD a month."
"The solution is expensive when compared to other products but offers unlimited bandwidth."
"I think the pricing is competitive. I think as far as licensing is concerned it's pretty straightforward because it's based on domain. It's just that sometimes domains could be tricky with some customers."
"We don't have any issues with the price."
"The product is moderately priced."
"AWS WAF is pay-as-you-go, I only pay for what I'm using. There is no subscription or any payment upfront, I can terminate use at any time. Which is an advantage."
"It's an annual subscription."
"We are kind of doing a POC comparison to see what works best. Pricing-wise, AWS is one of the most attractive ones. It is fairly cheap, and we like the pricing part. We're trying to see what makes more sense operation-wise, license-wise, and pricing-wise."
"The pricing should be more affordable, especially as it pertains to small clients."
"The pricing is good and manageable."
"For Kubernetes microservices, AWS is more expensive compared to OCI. AWS costs approximately 70 cents per hour, while OCI is 50% cheaper."
"I rate the product price a five on a scale of one to ten, where one is high price, and ten is low price"
"The product is affordable."
report
Use our free recommendation engine to learn which Web Application Firewall (WAF) solutions are best for your needs.
866,561 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Comms Service Provider
11%
Financial Services Firm
10%
Manufacturing Company
7%
Computer Software Company
16%
Financial Services Firm
14%
Manufacturing Company
8%
Government
6%
No data available
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business45
Midsize Enterprise8
Large Enterprise25
By reviewers
Company SizeCount
Small Business22
Midsize Enterprise11
Large Enterprise25
No data available
 

Questions from the Community

Which is the best DDoS protection solution for a big ISP for monitoring and mitigating?
Cloudflare. We are moving from Akamai prolexic to Cloudflare. Cloudflare anycast network outperforms Akamai static GR...
Which would you choose - Cloudflare DNS or Quad9?
Cloudflare DNS is a very fast, very reliable public DNS resolver. It is an enterprise-grade authoritative DNS service...
What do you like most about Cloudflare?
Cloudflare offers CDN and DDoS protection. We have the front end, API, and database in how you structure applications.
What are the limitations of AWS WAF vs alternative WAFs?
Hi Varun, I have had experienced with several WAF deployments and deep technical assessments of the following: 1. Im...
How does AWS WAF compare to Microsoft Azure Application Gateway?
Our organization ran comparison tests to determine whether Amazon’s Web Service Web Application Firewall or Microsoft...
What do you like most about AWS WAF?
The most valuable feature of AWS WAF is its highly configurable rules system.
What do you like most about StackPath WAF?
The product’s most valuable is WAF. The authentication feature helps us protect WordPress sites.
What needs improvement with StackPath WAF?
The product’s performance for caching feature needs improvement. It could provide high security to handle large traff...
 

Also Known As

Cloudflare DNS
AWS Web Application Firewall
StackPath Web Application Firewall
 

Overview

 

Sample Customers

Trusted by over 9,000,000 Internet Applications and APIs, including Nasdaq, Zendesk, Crunchbase, Steve Madden, OkCupid, Cisco, Quizlet, Discord and more.
eVitamins, 9Splay, Senao International
Robotics Cats, Jewlr
Find out what your peers are saying about F5, Amazon Web Services (AWS), Microsoft and others in Web Application Firewall (WAF). Updated: August 2025.
866,561 professionals have used our research since 2012.